Analysis
- max time kernel
150s - max time network
121s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 10:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
- Size 36.3MB
- Sample260810-mt7fca1zh1
- SHA256 74786b60d5b037d1cc04ca6dba4372b64d3a2114b3024ee64a5cbaa17972bc7e
- MD5 2110bfc1b5a92dfc8aa6e5f5dea5b6a3
- SHA1 2844e091f6e66b24bba3eb9c9ab9200709cc0e96
- SHA512 da1c9161b4e0037701298c208220da0362e344181a0d9b96a3daad941ef8bd87faec266a436bc0eb8ce2f8c23338eceb23464af6b1274773165b05d7314ecf2a
- SSDEEP 393216:rF6VbxL5DjhzYUyat/fPy0plIc5LeIYwMIUo/B23T8:CzY6XP0voJI
- TLSH T116873B157B5998ADD07BC074D2878B62AA3170EA0B357AFB44D082792F39EF95E3C314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe 5028 2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-10_2110bfc1b5a92dfc8aa6e5f5dea5b6a3_akira_cobalt-strike_glassworm_quasar-rat_rusty-stealer.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5028
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\D3DSCache\b96391859efe3abe\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
- Size 64KB
- SHA256 1d1a643dbcc8d680b7676891089f0b8e6e7e3121331007131dcbcd6defad5099
- MD5 b2abdce8c5dbac99d024181df5bf00c5
- SHA1 06bfdb0aea88ceb72ba2e4cfa980a3968c803e31
- SHA512 fc643ae93cf83448b58a6330f13565482b4d13165cfa3bb6d83cdd8a92e2f6c20e4618b5ee56fd3a343b45d387d9771010d9cbbc769bb3642b4adabbe9e2c7a3
- SSDEEP 6:50lraZaRrpyncmQI2qz5CkkHR3Td44EilMljBlt7QNufXO/WC3kCKXu:5sra8RrKcDukhx3qDljBltkuf+OCUC
- TLSH T160537D4E3292AB2BC8221A70498F05A87B3DB70A7F67001301D0C322C875B65CA6328D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\D3DSCache\b96391859efe3abe\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
- Size 4B
- SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
- MD5 f49655f856acb8884cc0ace29216f511
- SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
- SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\D3DSCache\b96391859efe3abe\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
- Size 51KB
- SHA256 ca0457b4da13e54b4e99f471c8f616fcfdbdc487c0baf4da97fadee1fd94eec3
- MD5 4f0dc224fd0598e880c4fe5cd5d9dbee
- SHA1 17f19fc7a698d6426659779e282207dbbeb18042
- SHA512 b3327739e18db4d5c0ce64edc409b87a9f8a46e04a5257bdbe30d80c32b274eaf41f19bb635f4b2f845cdd684bdd1192e982cced35a4bc4ac02f8cdd76401c43
- SSDEEP 768:dg5dTxwGBCDnpKFr5YcXXu0PFOnWj827YZ1UODHYal/SNn8rlmwNXweNUhFJ:K7TubLULLPFGu0Z19HYa4x8rZ2r3J
- TLSH T10C336D8389C1ADD2F061F53EC9E9C6E1E33BC0886F164FEEA0F6D56ED90755708428A1
- MD5 SHA1 SHA512 SSDEEP TLSH